Skip to content
CVE PROGRAM SOURCE RECORD6.6 Medium

CVE-2023-3441

Exposure of Sensitive Information Due to Incompatible Policies in GitLab

Description

An issue has been discovered in GitLab EE/CE affecting all versions starting from 8.0 before 16.4. The product did not sufficiently warn about security implications of granting merge rights to protected branches.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GitLab GitLab

Default version status: unaffected

  • 8.0 to < 16.4affected

References